...
Default Access | With specified Group Access | With Delegated Groups enabled |
|---|---|---|
  |   |  |
Delegated Groups (Since 1.6.2)
Delegated Groups allow system admins to give Users within specific Groups the ability to SU into authorised specified Users and Users within authorised Specified Groups. The difference between specified Group access and Delegated Groups access is that specified Groups can SU to anybody whereas users within a Delegated Group can only SU to a user that they have been explicitly authorised to SU into.Enable Delegated Groups to be able to maniupulate Delegated Groups and allow Jira users within Delegated Groups to SU to authorised Jira users by ticking the checkbox and saving the SU for Jira configuration as shown below.scope a SU ability for nominated group members to manage a target group. This differs from standard SU whereby any authorized user for SU can SU to any user (apart from where a privilege escalation occurs).
The Delegated Groups feature must be enabled before use:
...
When Delegated Groups is disabled, Users within Delegated Groups will not be able to use SU and the System admin wont be able to add, remove or manipulate Delegated Group authorisations, as shown below:
...
| Code Block |
|---|
2018-10-08 14:01:47,710 http-nio-8080-exec-6 INFO [jira.web.action.JiraSUAction] SU Complete, From [user=admin, name=admin] To [user=test, userName=test] ... 2018-10-08 14:02:11,512 http-nio-8080-exec-12 INFO [jira.web.action.JiraSUExitAction] SU EXIT Complete, From [user=test, name=test] BackTo [user=admin, userName=admin] |
Manual Tweak required (Prior to V 1.4.4)
Modify the file /atlassian-jira/secure/admin/user/views/userbrowser.jsp to get a UI 'SU' link. Find the following (starting around line 182 in Jira 5.2), the bold section is added to make the SU link visible.
Code Block <td data-cell-type="operations"> <ul class="operations-list">.. <li><a id="su_link_<webwork:property value='name'/>" href="<ww:url page='JiraSU.jspa'><ww:param name="'name'" value='name' /></ww:url>">SU</A></li> <li><a id="projectroles_link_<ww:property value=" name" />" href="<ww:url page="ViewUserProjectRoles!default.jspa"> <ww:param name="'name'" value="name" /> <ww:param name="'returnUrl'" value="'UserBrowser.jspa'" /> </ww:url>"> <ww:text name="'common.words.project.roles'" /></a></li>... </ul> </td>
The manual approach
Jira 3.x - 4.1.x Add the following beneath it:
| Code Block |
|---|
| <a id="su_link_<webwork:property value="name"/>" href="<webwork:url page="JiraSU.jspa"><webwork:param name="'name'" value="name" /></webwork:url>">SU</A> |
Jira 4.2
| Code Block |
|---|
| <a id="su_link_<webwork:property value='name'/>" href="<ww:url page='JiraSU.jspa'><ww:param name="'name'" value='name' /></ww:url>">SU</A> |
Jira 4.4+ - 6.0
| Code Block |
|---|
<li><a id="su_link_<webwork:property value='name'/>" href="<ww:url page='JiraSU.jspa'><ww:param name="'name'" value='name' /></ww:url>">SU</A></li> |
Usage
Once installed, as a system administrator, go to the User Browser, you will find a SU link in the Operations column. Clicking SU will reset who you are to the given user, and return you to the Dashboard.
...